Description
A use-after-free vulnerability was found in the Linux kernel's Siano USB driver for digital TV receivers. In do_submit_urb(), memory allocated during smsusb_probe() can be freed by smsusb_term_device() while URB work items are still referencing it. This leads to a use-after-free condition when worker threads access the freed memory.
Mitigation
Minimal update. May introduce new vulnerabilities or breaking changes.
|
 debian 11 | | =5.10.103-1 || =5.10.103-1~bpo10+1 || =5.10.106-1 || =5.10.113-1 || =5.10.120-1 || =5.10.120-1~bpo10+1 || =5.10.127-1 || =5.10.127-2 || =5.10.127-2~bpo10+1 || =5.10.136-1 || =5.10.140-1 || =5.10.148-1 || =5.10.149-1 || =5.10.149-2 || =5.10.158-1 || =5.10.158-2 || =5.10.162-1 || =5.10.46-4 || =5.10.46-5 || =5.10.70-1 || =5.10.70-1~bpo10+1 || =5.10.84-1 || =5.10.92-1 || =5.10.92-1~bpo10+1 || =5.10.92-2 || >=0 <5.10.178-1 | 5.10.178-1 |
debian 14 | | | 6.1.20-1 |
debian 12 | | | 6.1.20-1 |
debian 13 | | | 6.1.20-1 |
 rpm rhel9 | | - | - |
rpm rhel8 | | | 0:4.18.0-513.5.1.el8_9 |
rpm rhel8.6 | | | 0:4.18.0-372.91.1.el8_6 |
rpm rhel9 | | | 0:5.14.0-362.8.1.el9_3 |
rpm rhel8 | | - | - |
